Fortinet NSE7_EFW-6.4 Online Practice Questions and Exam Preparation

Fortinet NSE7_EFW-6.4 Online Questions & Answers

• Question 41:

  An administrator wants to capture ESP traffic between two FortiGates using the built-in sniffer. If the administrator knows that there is no NAT device located between both FortiGates, what command should the administrator execute?

  A. diagnose sniffer packet any `udp port 500'
  B. diagnose sniffer packet any `udp port 4500'
  C. diagnose sniffer packet any `esp'
  D. diagnose sniffer packet any `udp port 500 or udp port 4500'
  C. diagnose sniffer packet any `esp'

• Question 42:

  View the central management configuration shown in the exhibit, and then answer the question below.

  

  Which server will FortiGate choose for antivirus and IPS updates if 10.0.1.243 is experiencing an outage?

  A. 10.0.1.240
  B. One of the public FortiGuard distribution servers
  C. 10.0.1.244
  D. 10.0.1.242
  B. One of the public FortiGuard distribution servers

• Question 43:

  Which two statements about FortiManager is true when it is deployed as a local FDS? (Choose two.)

  A. It caches available firmware updates for unmanaged devices.
  B. It can be configured as an update server, or a rating server, but not both.
  C. It supports rating requests from both managed and unmanaged devices.
  D. It provides VM license validation services.
  C. It supports rating requests from both managed and unmanaged devices.
  D. It provides VM license validation services.

• Question 44:

  View the exhibit, which contains the partial output of a diagnose command, and then answer the question below.

  

  Based on the output, which of the following statements is correct?

  A. Anti-reply is enabled.
  B. DPD is disabled.
  C. Quick mode selectors are disabled.
  D. Remote gateway IP is 10.200.5.1.
  A. Anti-reply is enabled.

• Question 45:

  Examine the output of the `get router info ospf neighbor' command shown in the exhibit; then answer the question below.

  

  Refer to the exhibit, which shows the output of a debug command. Which statement about the output is true?

  A. TheOSPF routers with the IDs 0.0.0.69 and 0.0.0.117 are both designated routers for the war. l network.
  B. The OSPF router with the ID 0.0.0.2 is the designated router for the ToRemote network.
  C. The local FortiGate is the designated router for the wan1 network.
  D. The interface ToRemote is a point-to-point OSPF network.
  D. The interface ToRemote is a point-to-point OSPF network.

• Question 46:

  Refer to the exhibit, which contains partial output from an IKE real-time debug.

  

  Based on the debug output, which phase 1 setting is enabled in the configuration of this VPN?

  A. auto-discovery-shortcut
  B. auto-discovery-forwarder
  C. auto-discovery-sender
  D. auto-discovery-receiver
  D. auto-discovery-receiver

• Question 47:

  A FortiGate device has the following LDAP configuration:

  

  The administrator executed the `dsquery' command in the Windows LDAp server 10.0.1.10, and got the following output:

  >dsquery user -samid administrator

  "CN=Administrator, CN=Users, DC=trainingAD, DC=training, DC=lab"

  Based on the output, what FortiGate LDAP setting is configured incorrectly?

  A. cnid.
  B. username.
  C. password.
  D. dn.
  B. username.

• Question 48:

  View the exhibit, which contains the output of diagnose sys session stat, and then answer the question below.

  

  Which statements are correct regarding the output shown? (Choose two.)

  A. There are 0 ephemeral sessions.
  B. All the sessions in the session table are TCP sessions.
  C. No sessions have been deleted because of memory pages exhaustion.
  D. There are 166 TCP sessions waiting to complete the three-way handshake.
  A. There are 0 ephemeral sessions.
  C. No sessions have been deleted because of memory pages exhaustion.

• Question 49:

  An administrator has configured two FortiGate devices for an HA cluster. While testing HA failover, the administrator notices that some of the switches in the network continue to send traffic to the former primary device. The administrator decides to enable the setting link- failed-signal to fix the problem.

  Which statement about this setting is true?

  A. It sends an ARP packet to all connected devices, indicating that the HA virtual MAC address is reachable through a new master after a failover.
  B. It sends a link failed signal to all connected devices.
  C. It disabled all the non-heartbeat interfaces in all HA members for two seconds after a failover.
  D. It forces the former primary device to shut down all its non-heartbeat interfaces for one second, while the failover occurs.
  D. It forces the former primary device to shut down all its non-heartbeat interfaces for one second, while the failover occurs.

• Question 50:

  Which two statements about bulk configuration changes made using FortiManager CLI scripts are correct? (Choose two.)

  A. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.
  B. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.
  C. When run on the All FortiGate in ADOM, changes are automatically installed without the creation of a new revision history.
  D. When run on the Policy Package, ADOM database, changes are applied directly to the managed FortiGate device.
  A. When run on the Device Database, you must use the installation wizard to apply the changes to the managed FortiGate device.
  B. When run on the Remote FortiGate directly, administrators do not have the option to review the changes prior to installation.